434

Chapter 9
N
Planning Business Continuity and High Availability
Additionally, you can back up and restore system state using the Wbadmin tool. This was
covered in more depth in Chapter 5.
Once you install the Windows Backup feature, you have access to the
Wbadmin tool. The
following commands are available at the command line:
Enable Backup
ÛN
. You can use this command to enable or modify scheduled backups.
Disable Backup
ÛN
. You can use this command to disable scheduled backups.
Start Backup
ÛN
. You can immediately start a backup with this command. You can use
this to run a one-time backup.
Stop Job
ÛN
. This command will stop a backup or recovery that is currently running.
Get Versions
ÛN
. You can read the version information from available backups with this
command. Version information includes the backup time and date stamp, the backup
destination, and the version identifier.
Get Items
ÛN
. This will list information on individual items contained within a backup.

backup catalog.
Delete Catalog
ÛN
. This will delete a backup catalog.
Each of the
Wbadmin commands has extensive syntax requirements beyond the scope of
this book. For the syntax of any of the commands, you can get help at the command line
with the following syntax:
Wbadmin command /?
For example, if you want more information on the Start Systemstaterecovery com-
mand, you can enter the following command:
Wbadmin Start Systemstaterecovery /?
93157c09.indd 434 8/8/08 10:34:31 AM
Windows Server Backup Features

435
Using Windows Server Backup
Exercise 9.2 shows the steps to launch Windows Server Backup and run a server recovery
backup.
If you don’t have the backup feature installed, you can follow the steps in
Exercise 5.2 in Chapter 5.
EXERCISE 9.2
Running Windows Server Backup
1. Click Start  Administrative Tools  Windows Server Backup.
2. In the Windows Server Backup tool, click Backup Once.
3. On the Backup Options page, select Different Options (if it’s not already selected),
and click Next.
4. On the Select Backup Configuration page, select Custom, and click Next.
5. On the Select Backup Items page, select the check box for only the volume (or volumes)
needed for system recovery. Deselect the check boxes for the remaining drives (if there

The tools included in the WinRE are as follows:
Windows Complete PC Restore If you created a full server backup, you can use the Win-
dows Complete PC Restore tool to fully restore your operating system and server. If you
select this option, the system will search for a valid backup location (such as a DVD drive
or a portable USB disk drive). You can then restore from the full server backup stored on
this location.
Windows Memory Diagnostic tool If you suspect your server has problems with the
physical random access memory (RAM), you can use this tool to check the RAM. This
tool does require a valid server 2008 installation to function. If you choose this option,
you will be prompted to either restart the computer immediately and run the Memory
Diagnostic tool or allow it to run on the next boot.
93157c09.indd 436 8/8/08 10:34:32 AM
Windows Recovery Environment

437
Command prompt You can access to the command prompt with administrator privileges
in the WinRE. This allows you to access the file system if needed. You also have access to
Windows Backup Admin (
Wbadmin) commands.
Entering WinRE
There are four ways to enter the Windows Recovery Environment:
Boot from the installation CD When you boot from the installation CD, you can select
Repair Your Computer from the installation screen. Exercise 9.3 will walk you through the
steps for this process.
Deploy from WDS You can create a Windows RE image file (
.wim) and deploy it using Win-
dows Deployment Services (WDS). WDS was covered in much more depth in Chapter 2.
Create a bootable WinRE disk It’s also possible to create a WinRE bootable disk. To
create a WinRE bootable disk (in the format of an
.iso file), you could use the Business

you want to repair. If there aren’t any operating systems listed, you can still enter the
WinRE environment by clicking Next.
5. On the Choose a Recovery Tool page (shown in the following graphic), you can choose
Windows Complete PC Restore, Windows Memory Diagnostic Tool, or Command
Prompt. Choose Command Prompt.
6. In the command prompt window, enter wbadmin /?. You’ll see a list of commands
available via the
Wbadmin tool in WinRE.
93157c09.indd 438 8/8/08 10:34:32 AM
Exam Essentials

439
Summary
In this chapter, you learned about several different possibilities of ensuring business continuity
and making your data highly available.
Any NTFS disk can have Shadow Copies enabled on it, allowing previous versions to be
created on a regular schedule. Users can then restore their data on their own.
You learned about many of the RAID disk solutions and what is relevant with Windows
Server 2008 such as RAID-0, RAID-1, RAID-5, and RAID-10.
A significant portion of the chapter was dedicated to failover clusters. You learned that
failover clusters can be used to provide fault tolerance for a server. A drawback of failover
clusters is the added cost due to the hardware and shared storage requirements. Fibre Channel
(FC) is significantly more expensive, but iSCSI brings the cost down some by using existing
network infrastructure.
Network Load Balancing (NLB) clusters can be used for servers that don’t need shared
storage (such as IIS, firewalls, and proxy servers). Unlike failover clusters that can be installed
only on Windows Server 2008 Enterprise or Datacenter editions, NLB clusters can be
installed on any version.
You learned about the capabilities of Windows Server Backup and the
Wbadmin command-

Know the backup and restore capabilities of Windows Server 2008. You should know the
capabilities of the Windows Server Backup and
Wbadmin tools, such as what can be backed
up, where backups can be stored, and what can be restored.
Know about the Windows Recovery Environment. You should know the capabilities avail-
able in the Windows Recovery Environment (WinRE) and how the WinRE can be accessed.
93157c09.indd 440 8/8/08 10:34:32 AM
Review Questions

441
Review Questions
1. You are tasked with recommending a strategy that allows users to retrieve previous versions
of files without intervention by an administrator. If a disk fails, you should be able to restore
individual files. All servers are running Windows Server 2008. What should you do? (Choose
all that apply.)
A. Perform a daily backup of data.
B. Enable Shadow Copies, and store them on the same volume.
C. Enable Shadow Copies, and store them on a different volume.
D. Enable clustering on the server.
2. Users store their data on a file server running Windows Server 2008. Recently, a junior
administrator has spent a lot of time retrieving data files for several users from backups.
You’d like to reduce the administrator’s need to do this. What can you do?
A. Install Windows Server Backup on the users’ desktops.
B. Install Windows Complete PC Restore on the users’ desktops.
C. Install the WinRE on the users’ desktops.
D. Enable Shadow Copies.
3. You are preparing to deploy Microsoft SQL Server on a Windows Server 2008 server. You
have five disks. You want to provide protection of the operating system and the data in the
event a single disk fails. You also want to optimize the performance of the disks. What should
you do?

B. Install Windows Server 2008 Enterprise edition on two servers, and implement network
load balancing.
C. Install Windows Server 2008 Enterprise edition on two servers, and implement
failover clusters.
D. Install Windows Server 2008 Data Center edition using a Server Core installation on
two servers, and implement failover clusters.
6. You are researching the requirements to deploy file server on Windows Server 2008. Your
solution must meet the following requirements: maintain access to all data if a single server
fails or if a single disk fails. The disks should be configured for optimum disk throughput.
What should you do?
A. Implement a two-node failover cluster with external storage configured as a RAID-10.
B. Implement a two-node failover cluster with external storage configured as a RAID-0.
C. Implement a two-node failover cluster with external storage configured as a RAID-1.
D. Implement a two-node failover cluster with internal storage configured as a RAID-10.
7. Your company is deploying a line-of-business application on Windows Server 2008 servers
internal to the network. You are tasked with identifying a method that will ensure the appli-
cation will continue to run even if a single server fails. What should you recommend?
A. Deploy a three-node failover cluster using the Node and File Share Majority quorum
configuration.
B. Deploy a three-node failover cluster using the Node and Disk Majority disk only
quorum configuration.
C. Deploy a two-node failover cluster using the Node and File Share Majority quorum
configuration.
D. Deploy a two-node failover cluster using the No Majority: Disk Only quorum
configuration.
8. Your company has its headquarters in Virginia Beach and a branch office in Suffolk. The
company is planning on deploying a client/server application that will be available to users
at the headquarters and the branch office. You are tasked with identifying a method of
ensuring the application will remain available even if a single server fails, while minimizing
costs. All servers run Windows Server 2008. What should you recommend?

B. Deploy a two-node cluster. Configure the external storage as a RAID-10 array.
C. Deploy a one-node cluster. Configure internal storage as a RAID-10 array. Format the
array as a GPT disk.
D. Deploy a two-node cluster. Configure the external storage as a RAID-5 array. Format
the array as a GPT disk.
11. You are preparing to deploy three file servers running Windows Server 2008 in a failover
cluster. The storage strategy for the cluster needs to isolate the cluster storage traffic from
the existing network and ensure that data is available if one of the storage controllers fails.
What should you do?
A. Use iSCSI with VDS.
B. Use iSCSI with MPIO.
C. Use Fibre Channel with VDS.
D. Use Fibre Channel with MPIO.
12. You are tasked with planning the deployment of a web-based application. You need to pro-
vide high availability for the web-based application in the event of a single server failure.
Additionally, you must minimize costs. What should you choose?
A. Install Windows Server 2008 Enterprise edition on two servers, and configure a
failover cluster.
B. Install Windows Server 2008 Datacenter edition on two servers, and configure a
failover cluster.
C. Install Windows Server 2008 Web edition on two servers, and configure an NLB cluster.
D. Install Windows Server 2008 Standard edition on two servers, and configure an
NLB cluster.
93157c09.indd 443 8/8/08 10:34:33 AM
444

Chapter 9
N
Planning Business Continuity and High Availability
13. You have configured two servers running Server Core as part of a network load balancing

C. WDS and Windows Server Backup
D. Windows Server Backup and previous versions
17. You are asked to recommend a failover cluster storage solution for a Windows Server 2008
server on a TCP/IP network. The solution should minimize costs. What do you recommend?
A. Basic
B. Dynamic
C. FC
D. iSCSI
93157c09.indd 444 8/8/08 10:34:33 AM
Review Questions

445
18. You are developing a business continuity plan and are considering your domain controllers.
You want to be able to perform a complete recovery of each entire domain controller in the
event of failure of the server. Each of the domain controllers is installed on Windows Server
2008. Which of the following options will fulfill this goal? (Choose all that apply.)
A. Create a WinRE partition on each domain controller.
B. Use WDS to deploy the WinRE.
C. Install the Complete PC and Restore feature on each domain controller.
D. Use WDS to deploy the Complete PC and Restore feature.
19. You want to implement a recovery plan for Windows Server 2008 servers you manage.
How can the WinRE be launched? (Choose all that apply.)
A. From the command line
B. From WDS
C. From the installation DVD
D. From a bootable WinRE disk
20. A server you manage has suffered a catastrophic failure. You are considering launching the
WinRE to assist. What can be launched from the WinRE? (Choose all that apply.)
A. The WinRE command prompt
B. Windows Complete PC Restore

(only services such as DHCP, DNS, file servers, or Active Directory Domain Services).
Load balancing does not provide fault tolerance.
6. A. A two-node failover cluster will provide fault tolerance if a single server fails. An exter-
nal RAID-10 will provide fault tolerance to the disk subsystem and provide the best disk
throughput. RAID-0 does not provide fault tolerance, and RAID-1 doesn’t provide the
best throughput. You can’t use internal storage with a failover cluster.
7. C. Since you want to protect one server and minimize costs, a two-node cluster would
be the best choice. The Node and File Share Majority quorum configuration (or the Node
and Disk quorum configuration) is recommended for an even number of nodes. Three
nodes would add unnecessary costs. The No Majority: Disk Only quorum configuration
is included for backward compatibility and is otherwise not recommended.
8. C. A single two-node cluster can be used. One node would be at each location, and if the
node fails, the users would be automatically redirected to the other node. There’s no such
thing as a one-node failover cluster. It would be much more expensive than necessary to
implement two failover clusters (one at each office).
93157c09.indd 446 8/8/08 10:34:33 AM
Answers to Review Questions

447
9. B. A failover cluster will maximize fault tolerance. Windows Server 2008 Enterprise and
Datacenter editions support failover clusters. You can use the existing network infrastructure
to support iSCSI. A Fibre Channel will not use the existing network infrastructure but require
additional hardware. Windows Server 2008 Standard edition does not support failover clus-
ters. A network load balancing (NLB) cluster does not provide fault tolerance.
10. D. A two-node cluster will support the requirement to keep the services operational if a
single server fails. RAID-5 will ensure the data is protected (as will RAID-10). Using GPT
disk, you can support volumes larger than two terabytes. RAID-0 won’t provide fault toler-
ance for the disks. Without GPT, there isn’t support for volumes larger than 2TB. There is
no such thing as a one-node cluster.
11. D. Fibre Channel will isolate the storage traffic from the existing network by using dedicated

total server failure.
93157c09.indd 447 8/8/08 10:34:34 AM
448

Chapter 9
N
Planning Business Continuity and High Availability
17. D. An Internet Small Computer Serial Interface (iSCSI) interface minimizes costs by utiliz-
ing existing network infrastructure. Fibre Channel (FC) is generally more expensive since
it requires dedicated hardware and connections. The cost is not affected if disks are basic
or dynamic.
18. A, B. You can use Windows Deployment Services (WDS) to deploy the Windows Recovery
Environment (WinRE) or create a WinRE partition on the domain controller. You can also
use the installation DVD to boot into the WinRE or create a bootable CD with the WinRE.
You can’t install the Complete PC and Restore feature on a server but instead can install
only the WinRE, which includes the Complete PC and Restore feature.
19. B, C, D. The Windows Recovery Environment (WinRE) can be launched from Windows
Deployment Services (WDS), from the installation DVD (by selecting Repair Your Computer),
or from a bootable WinRE disk. You can’t launch WinRE from the command line.
20. A, B, C. The system recovery options available from the Windows Recovery Environment
(WinRE) are Windows Complete PC Restore, Windows Memory Diagnostic Tool, and
the WinRE command prompt. You can’t access the Windows Server Backup from the WinRE.
93157c09.indd 448 8/8/08 10:34:34 AM
About the
Companion CD
IN THIS APPENDIX:
What you’ll find on the CD
System requirements
Using the CD 
Troubleshooting

visit Adobe’s website at
www.adobe.com/products/reader/.
93157book.indd 450 8/7/08 4:06:13 PM
Troubleshooting

451
Electronic Flashcards
For PC, Pocket PC, and Palm
These handy electronic flashcards are just what they sound like. One side contains a
question or fill-in-the-blank question, and the other side shows the answer.
System Requirements
Make sure your computer meets the minimum system requirements shown in the following
list. If your computer doesn’t match up to most of these requirements, you may have problems
using the software and files on the companion CD. For the latest and greatest information,
please refer to the ReadMe file located at the root of the CD-ROM.
A PC running Microsoft Windows 98, Windows 2000, Windows NT4 (with SP4 or

later), Windows Me, Windows XP, or Windows Vista
An Internet connection

A CD-ROM drive

Using the CD
To install the items from the CD to your hard drive, follow these steps:
1. Insert the CD into your computer’s CD-ROM drive. The license agreement appears.
Windows users: The interface won’t launch if you have autorun disabled.
In that case, click Start  Run (for Windows Vista, Start  All Programs 
Accessories  Run). In the dialog box that appears, type
D:\Start.exe.
(Replace D with the proper letter if your CD drive uses a different letter.

If you have trouble with the book’s companion CD-ROM, please call the Wiley Product
Technical Support phone number at (800) 762-2974. Outside the United States, call
+1(317) 572-3994. You can also contact Wiley Product Technical Support at
http://sybex
.custhelp.com. John Wiley & Sons will provide technical support only for installation and
other general quality-control items. For technical support on the applications themselves,
consult the program’s vendor or author.
To place additional orders or to request information about other Wiley products, please
call (877) 762-2974.
93157book.indd 452 8/7/08 4:06:18 PM
Glossary
93157book.indd 453 8/7/08 4:06:42 PM
454

Glossary
A
Active Directory A directory service included in Active Directory Domain Services that
stores information about resources (such as users, computers, and groups). The data is stored
in a database and made available to users and computers on the network.
Active Directory Certificate Services (AD CS) A server role used to create certification
authorities and issue certificates. Certificates and certification authorities are part of a public
key infrastructure (PKI).
Active Directory Domain Services (AD DS) A server role using a distributed database to
store and manage information about network resources and application-specific data from
directory-enabled applications (such as Active Directory–integrated DNS). A server running
AD DS is called a domain controller.
Active Directory–integrated (ADI) zone A DNS zone that is stored in Active Directory and
replicated by Active Directory. A significant benefit of using ADI zones is that DNS zone trans-
fers are part of Active Directory replication and don’t need to be managed separately.
Administrators (domain) A group on the domain that grants members full and complete

certificate An electronic file. It holds information about the holder of the certificate, the
issuer of the certificate (the CA), when it expires, and a key that can be used for encryption.
Certificates are used for a wide variety of purposes, but the two primary purposes of a
certificate are encryption and authentication.
certificate revocation list A list of certificates that have been revoked. Certificates are
revoked if they have been compromised. When a client receives a certificate, they will often
query the certification authority for the certificate revocation list (CRL, pronounced “crill”)
to verify it is valid. The Online Certificate Status Protocol (OCSP) can also be used to check
the status of a certificate.
certification authority A server that issues, manages, and verifies certificates. A certification
authority (CA, commonly pronounced as “cah”) can be either public or private.
collector-initiated subscription An event subscription where the computer receiving
the events (the collector) initiates the transfer. This is also known as a pull subscription.
The collector periodically contacts the source computer and pulls the events.
Cscript.exe A command-based script host. Cscript.exe allows you to run scripts from
the command line. It is the complement to the Windows Script Host, which runs scripts
within Windows using dialog boxes.
custom image An image used to fully deploy a system. Custom images are derived from
basic images but are modified to include applications and any other operating system settings
as desired.
D
data collector set A group of data collection points used to review or log the performance
of a system. You can access several predefined data collector sets within the Reliability and
Performance Monitor that can be used to easily measure the performance of your server.
You can also create your own user-defined data collector sets.
93157book.indd 455 8/7/08 4:06:42 PM
456

Glossary
data recovery agent (DRA) A designated person or account that can decrypt files

name resolution of hostnames. DNS includes many types of records (A, AAAA, PTR, NS,
MX, CNAME, SRV, and SOA) and is used within a domain to help clients and servers
locate resources on the network. DNS is required within an Active Directory Domain
Services domain.
Domain Naming Master One of five FSMO roles. The Domain Naming Master is used to
manage the creation of new domains within the forest. Only one Domain Naming Master
exists within a forest.
93157book.indd 456 8/7/08 4:06:42 PM
Glossary

457
Dynamic Host Configuration Protocol (DHCP) A server role in Windows Server 2008
used to dynamically provide TCP/IP configuration information to clients. TCP/IP information
includes IP address, subnet mask, default gateway, address of DNS server, address of WINS
server, domain name, and much more.
dynamic update Process of dynamically updating DNS records. When a client turns on, it
will typically receive TCP/IP configuration information (including an IP address and the IP
address of a DNS server) from DHCP. The client will then give the DNS server its name and
IP address to update the A record. It’s common for the DHCP server to update the client’s
PTR record.
E
enterprise certification authority (CA) A certification authority that exists within an
Active Directory Domain Services domain. A company can create an enterprise CA to
issue certificates within the enterprise instead of purchasing certificates from an external
stand-alone CA.
F
failover cluster A server redundancy feature that allows a service to continue operating
even if a server fails. A failover cluster has two or more servers configured as nodes in a
failover cluster. Nodes in a failover clusters must share the same data source. If one node
fails, another node will access the data source and continue to provide the service.

other three roles (RID Master, PDC Emulator, and Infrastructure Master) are unique
within each domain. In other words, if you had a forest with three domains, you would
have one Schema Master, one Domain Naming Master, three RID Masters, three PDC
Emulators, and three Infrastructure Masters.
G
global catalog A listing of all objects in a forest. The global catalog is queried to locate
objects (such as users, computers, groups, printers, and so on) within a forest. The global
catalog is hosted on a global catalog server.
GlobalNames Zone (GNZ) A type of DNS zone used to resolve single-label names.
Single-label names are referred to as GlobalNames and have been traditionally resolved
using WINS. A GNZ zone can be used to aid in the retirement of Windows Internet Name
Service (WINS) within a network.
Group Policy A group of settings that can be used to centrally manage users and computers
within an Active Directory Domain Services environment. The great strength of Group Policy
is that you can configure a setting once and have it apply to many users and computers within
your environment. You can use Group Policy to manipulate hundreds of settings, such as
deploying applications, redirecting folders, restricting the installation of removal devices,
managing passwords, and much, much more.
Group Policy Management Console (GPMC) A Microsoft Management Console (MMC)
snap-in that can be used to manage Group Policy within a forest. You can create, assign,
manipulate, back up, restore, troubleshoot, and manage Group Policy objects from within
the GPMC.
Group Policy objects (GPOs) An object that can be linked to sites, domains, and organi-
zational units for the purpose of managing users and computers. GPOs have two nodes
(computers and users) with hundreds of configuration options that can be configured. A
linked GPO will apply to all users and computers within the scope of the GPO.
93157book.indd 458 8/7/08 4:06:43 PM